This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/098HqpxTVWLO202IVRt3DFM5kLo.roa File: 098HqpxTVWLO202IVRt3DFM5kLo.roa (raw, json) Hash identifier: RcHMyg30fGzC4GCROpeqmAGw7DZxN7qgc75rAQNjhbk= Subject key identifier: D3:DF:07:AA:9C:53:55:62:CE:DB:4D:88:55:1B:77:0C:53:39:90:BA Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019AD998EA2152741AEB0690AB1944F4A7CB Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/098HqpxTVWLO202IVRt3DFM5kLo.roa Signing time: Mon 01 Dec 2025 11:07:48 +0000 ROA not before: Mon 01 Dec 2025 11:07:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 2.57.242.0/24 maxlen: 24 45.88.15.0/24 maxlen: 24 45.135.182.0/24 maxlen: 24 77.81.101.0/24 maxlen: 24 79.110.227.0/24 maxlen: 24 85.204.18.0/24 maxlen: 24 89.35.119.0/24 maxlen: 24 89.35.129.0/24 maxlen: 24 89.37.185.0/24 maxlen: 24 89.39.120.0/24 maxlen: 24 89.40.70.0/24 maxlen: 24 89.125.0.0/24 maxlen: 24 89.125.1.0/24 maxlen: 24 89.125.2.0/24 maxlen: 24 89.125.3.0/24 maxlen: 24 89.125.122.0/24 maxlen: 24 89.125.123.0/24 maxlen: 24 94.177.13.0/24 maxlen: 24 94.177.106.0/24 maxlen: 24 94.177.145.0/24 maxlen: 24 103.56.84.0/24 maxlen: 24 103.73.35.0/24 maxlen: 24 167.17.40.0/24 maxlen: 24 167.17.176.0/24 maxlen: 24 167.17.177.0/24 maxlen: 24 167.17.178.0/24 maxlen: 24 167.17.180.0/24 maxlen: 24 167.17.182.0/24 maxlen: 24 167.17.191.0/24 maxlen: 24 185.212.119.0/24 maxlen: 24 188.208.103.0/24 maxlen: 24 188.213.0.0/24 maxlen: 24 188.214.107.0/24 maxlen: 24 193.124.36.0/24 maxlen: 24 193.124.225.0/24 maxlen: 24 194.85.249.0/24 maxlen: 24 194.85.251.0/24 maxlen: 24 202.71.12.0/24 maxlen: 24 202.71.13.0/24 maxlen: 24 202.71.15.0/24 maxlen: 24 204.77.1.0/24 maxlen: 24 206.245.129.0/24 maxlen: 24 206.245.131.0/24 maxlen: 24 206.245.133.0/24 maxlen: 24 206.245.134.0/24 maxlen: 24 206.245.135.0/24 maxlen: 24 206.245.157.0/24 maxlen: 24 206.245.159.0/24 maxlen: 24 208.123.185.0/24 maxlen: 24 208.123.190.0/24 maxlen: 24 208.123.191.0/24 maxlen: 24 212.192.11.0/24 maxlen: 24 212.192.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:98:ea:21:52:74:1a:eb:06:90:ab:19:44:f4:a7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 1 11:07:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d3df07aa9c535562cedb4d88551b770c533990ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:7d:d3:12:f5:0a:d1:50:5b:2f:1d:74:0f: de:2d:ba:0d:24:7f:fe:1a:7a:0a:7b:20:b7:5f:07: c9:19:35:5f:07:a1:b0:4c:13:7b:20:84:bb:c3:16: fb:4f:79:60:65:80:e5:02:5c:10:69:ec:b6:95:e3: f0:1a:47:a7:e4:34:09:9e:4b:a0:67:4e:1a:22:0d: d9:a5:eb:1f:78:6a:9f:f8:7e:86:ad:85:fe:aa:f1: 32:94:b1:52:a1:b8:e5:06:41:d0:c0:17:83:cd:47: 08:10:68:29:b2:5b:02:7c:e7:49:4e:82:22:6f:2c: 57:85:78:1b:17:78:2b:b2:9e:9e:91:f5:c3:4e:92: 56:ba:23:b3:a0:62:52:61:f9:3e:14:cd:a9:50:38: df:c8:0a:85:9d:ef:e1:e0:91:b9:5f:94:3b:23:79: c1:53:26:e4:69:3d:b8:5e:3f:d4:f1:6d:de:aa:57: 43:90:e2:9a:d8:0e:e4:1c:e7:a4:12:95:aa:b9:b2: 83:3d:8f:92:9d:9b:ee:b3:57:44:b8:c4:b6:fc:00: cb:c2:4a:fd:42:d1:8f:d1:94:59:a8:8d:84:b2:7e: 18:e5:6b:41:42:ce:ef:53:fc:1a:a2:05:d6:60:ed: e6:a4:6d:3d:cf:a3:11:32:c8:19:1c:7a:0e:62:c3: 48:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DF:07:AA:9C:53:55:62:CE:DB:4D:88:55:1B:77:0C:53:39:90:BA X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/098HqpxTVWLO202IVRt3DFM5kLo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.242.0/24 45.88.15.0/24 45.135.182.0/24 77.81.101.0/24 79.110.227.0/24 85.204.18.0/24 89.35.119.0/24 89.35.129.0/24 89.37.185.0/24 89.39.120.0/24 89.40.70.0/24 89.125.0.0/22 89.125.122.0/23 94.177.13.0/24 94.177.106.0/24 94.177.145.0/24 103.56.84.0/24 103.73.35.0/24 167.17.40.0/24 167.17.176.0-167.17.178.255 167.17.180.0/24 167.17.182.0/24 167.17.191.0/24 185.212.119.0/24 188.208.103.0/24 188.213.0.0/24 188.214.107.0/24 193.124.36.0/24 193.124.225.0/24 194.85.249.0/24 194.85.251.0/24 202.71.12.0/23 202.71.15.0/24 204.77.1.0/24 206.245.129.0/24 206.245.131.0/24 206.245.133.0-206.245.135.255 206.245.157.0/24 206.245.159.0/24 208.123.185.0/24 208.123.190.0/23 212.192.11.0/24 212.192.212.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:57:e5:f9:88:61:3a:29:73:1d:e7:99:8e:83:02:d7:92:85: ec:18:07:a5:48:6d:05:fd:59:a0:de:c3:78:ff:3a:3d:62:a7: 3e:63:15:99:ba:8c:bb:05:2d:bd:07:c6:4f:fa:27:3b:52:f0: 49:17:6a:e2:c4:ba:54:7c:d7:7e:f0:92:98:c0:c3:a0:2e:35: 12:7f:e3:5e:38:ad:46:18:cd:0c:3c:36:54:a0:ba:db:15:1a: 3c:70:01:7f:86:29:8a:b3:19:6f:35:cf:7d:d1:83:70:be:a7: 20:81:05:ce:35:36:29:4f:6f:88:49:20:c8:d3:ec:94:a7:cf: 43:1c:b1:b5:dc:3c:6f:57:3a:9b:af:c0:88:aa:39:c5:75:7f: b5:10:bb:4e:52:22:da:72:ca:5b:91:cc:d6:d4:2f:07:b9:6a: d0:bf:b3:bc:6f:a0:d6:2d:04:c1:b5:1f:e2:f3:bd:fb:00:7c: 60:bc:35:f4:c4:06:a2:f8:d4:38:39:f8:37:c1:f8:4c:c3:ef: 0f:22:72:8d:9f:bc:10:ea:e9:0a:81:13:c0:24:11:9a:b8:bc: b1:69:38:ba:a1:f9:06:b9:a6:7e:f7:80:9a:56:93:29:bc:52: 40:16:d5:2e:96:93:35:f5:11:4c:91:a6:8d:cf:2f:51:cc:e3: a8:8f:d7:53 -----BEGIN CERTIFICATE----- MIIGEzCCBPugAwIBAgISAZrZmOohUnQa6waQqxlE9KfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjAxMTEwNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2RmMDdhYTljNTM1NTYyY2VkYjRkODg1NTFiNzcwYzUzMzk5MGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQt90xL1CtFQWy8ddA/eLboNJH/+ GnoKeyC3XwfJGTVfB6GwTBN7IIS7wxb7T3lgZYDlAlwQaey2lePwGken5DQJnkug Z04aIg3ZpesfeGqf+H6GrYX+qvEylLFSobjlBkHQwBeDzUcIEGgpslsCfOdJToIi byxXhXgbF3grsp6ekfXDTpJWuiOzoGJSYfk+FM2pUDjfyAqFne/h4JG5X5Q7I3nB UybkaT24Xj/U8W3eqldDkOKa2A7kHOekEpWqubKDPY+SnZvus1dEuMS2/ADLwkr9 QtGP0ZRZqI2Esn4Y5WtBQs7vU/waogXWYO3mpG09z6MRMsgZHHoOYsNITQIDAQAB o4IDHzCCAxswHQYDVR0OBBYEFNPfB6qcU1VizttNiFUbdwxTOZC6MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvMDk4SHFweFRWV0xPMjAySVZSdDNERk01a0xvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBMwYIKwYBBQUHAQcBAf8EggEiMIIBHjCCARoEAgABMIIB EgMEAAI58gMEAC1YDwMEAC2HtgMEAE1RZQMEAE9u4wMEAFXMEgMEAFkjdwMEAFkj gQMEAFkluQMEAFkneAMEAFkoRgMEAll9AAMEAVl9egMEAF6xDQMEAF6xagMEAF6x kQMEAGc4VAMEAGdJIwMEAKcRKDAMAwQEpxGwAwQApxGyAwQApxG0AwQApxG2AwQA pxG/AwQAudR3AwQAvNBnAwQAvNUAAwQAvNZrAwQAwXwkAwQAwXzhAwQAwlX5AwQA wlX7AwQBykcMAwQAykcPAwQAzE0BAwQAzvWBAwQAzvWDMAwDBADO9YUDBAPO9YAD BADO9Z0DBADO9Z8DBADQe7kDBAHQe74DBADUwAsDBADUwNQwDQYJKoZIhvcNAQEL BQADggEBAE5X5fmIYTopcx3nmY6DAteShewYB6VIbQX9WaDew3j/Oj1ipz5jFZm6 jLsFLb0Hxk/6JztS8EkXauLEulR8137wkpjAw6AuNRJ/4144rUYYzQw8NlSgutsV GjxwAX+GKYqzGW81z33Rg3C+pyCBBc41NilPb4hJIMjT7JSnz0McsbXcPG9XOpuv wIiqOcV1f7UQu05SItpyyluRzNbULwe5atC/s7xvoNYtBMG1H+LzvfsAfGC8NfTE BqL41Dg5+DfB+EzD7w8ico2fvBDq6QqBE8AkEZq4vLFpOLqh+Qa5pn73gJpWkym8 UkAW1S6WkzX1EUyRpo3PL1HM46iP11M= -----END CERTIFICATE-----Generated at Fri Dec 5 07:58:54 2025 by rpki-client